Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/24188908AD14A0E252B752DC6B76E300087F394D.cer
File:                     24188908AD14A0E252B752DC6B76E300087F394D.cer (raw, json)
Hash identifier:          AoKAsPu0NIc497zuQMb2KvHf85A/h5aJJuN12c1PnLg=
Subject key identifier:   24:18:89:08:AD:14:A0:E2:52:B7:52:DC:6B:76:E3:00:08:7F:39:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27F04EFB6EC44DA99ACEC0A6E8C7ED63C4B022DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/1/24188908AD14A0E252B752DC6B76E300087F394D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jan 2024 16:57:17 +0000
Certificate not after:    Thu 02 Jan 2025 17:02:17 +0000
Subordinate resources:    AS: 267507
                          IP: 201.182.96.0/22
                          IP: 2804:428c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f0:4e:fb:6e:c4:4d:a9:9a:ce:c0:a6:e8:c7:ed:63:c4:b0:22:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  4 16:57:17 2024 GMT
            Not After : Jan  2 17:02:17 2025 GMT
        Subject: CN=24188908AD14A0E252B752DC6B76E300087F394D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:a1:12:14:78:a2:65:1a:c9:ba:c6:02:0e:
                    57:5f:34:c7:1c:9e:6d:7c:24:e6:f4:85:65:8e:5b:
                    d2:1c:03:50:08:1f:9e:16:29:e9:29:a1:ec:a3:81:
                    3c:b2:87:67:7c:d0:9b:16:1a:02:e3:b4:ef:2e:b2:
                    2a:48:eb:e6:f8:b9:5f:73:72:f5:68:ee:da:44:4c:
                    ba:af:04:f8:f7:b7:c1:b6:25:0e:a5:5c:77:ee:66:
                    02:eb:4f:20:30:fc:a4:94:c0:35:6f:3f:57:7d:54:
                    ca:a0:33:91:4e:57:93:4c:e5:87:ed:a6:4e:92:79:
                    2a:41:50:de:e1:d0:69:69:85:27:dc:65:66:25:8a:
                    87:c1:5b:28:48:4e:7e:7f:2b:a0:18:3b:d8:f7:6a:
                    e0:ae:a7:bc:34:d1:8c:c0:28:0c:8b:28:aa:9f:67:
                    c6:8a:fb:c7:07:ac:d7:33:bf:85:4d:fc:3a:58:d8:
                    f6:43:1b:74:f1:31:fb:f7:3d:71:b2:56:8a:de:64:
                    11:d9:da:4b:55:09:27:bf:e3:92:b2:2d:65:7b:7d:
                    0e:40:b6:b5:67:35:e6:6b:c0:fa:99:0f:20:d8:ef:
                    a5:e9:ec:87:e3:cf:26:9a:c1:15:fc:fe:fa:05:db:
                    f6:e4:38:08:3d:62:25:c1:11:3d:5d:1b:bf:ed:1a:
                    8b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:18:89:08:AD:14:A0:E2:52:B7:52:DC:6B:76:E3:00:08:7F:39:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/1/24188908AD14A0E252B752DC6B76E300087F394D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.96.0/22
                IPv6:
                  2804:428c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267507

    Signature Algorithm: sha256WithRSAEncryption
         1a:cd:13:6b:70:7d:5f:c8:7b:8b:7f:29:ed:2d:10:d9:05:69:
         a0:2e:94:c6:79:65:f3:4e:c5:16:d5:81:4f:be:78:0a:ee:1b:
         2e:d8:0a:ac:b7:96:d1:81:97:60:8d:1a:36:88:1e:55:4a:5c:
         a8:8b:f7:f8:03:3e:1e:a3:38:ad:af:73:f9:7c:f0:f3:0a:38:
         1b:f3:26:85:a8:ad:b2:0f:44:77:3a:18:bf:e8:b1:92:7d:3c:
         38:54:96:5f:dc:19:06:e6:12:f6:11:9d:08:48:11:ad:5a:4f:
         c4:99:bd:45:93:6f:28:39:0c:c2:3c:48:15:39:18:05:4b:fc:
         76:0e:bc:db:bc:d2:18:93:4e:4f:39:bb:bd:8c:f5:07:ef:91:
         62:fd:e4:5c:9a:d3:1e:2a:5d:90:b3:4c:24:5a:b9:72:2b:0c:
         a1:fc:e4:49:ef:9a:aa:44:c8:fe:8e:e7:e0:cc:bc:37:e6:97:
         96:85:3c:30:d7:2f:cb:8f:ce:3a:2a:d5:c1:c9:9f:d0:a2:91:
         e0:de:fc:cb:39:d8:42:6f:2d:6d:51:7a:18:52:a9:28:6e:de:
         47:31:6f:26:6f:3e:47:d0:aa:a0:e9:19:e8:e2:86:c3:02:cc:
         92:ab:11:d2:c1:66:89:d9:da:b7:35:ec:29:2a:c1:03:e6:76:
         27:a2:c9:ea
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUJ/BO+27ETamazsCm6MftY8SwItwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMDQxNjU3MTdaFw0yNTAxMDIxNzAyMTdaMDMxMTAvBgNV
BAMTKDI0MTg4OTA4QUQxNEEwRTI1MkI3NTJEQzZCNzZFMzAwMDg3RjM5NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwCqESFHiiZRrJusYCDldfNMcc
nm18JOb0hWWOW9IcA1AIH54WKekpoeyjgTyyh2d80JsWGgLjtO8usipI6+b4uV9z
cvVo7tpETLqvBPj3t8G2JQ6lXHfuZgLrTyAw/KSUwDVvP1d9VMqgM5FOV5NM5Yft
pk6SeSpBUN7h0GlphSfcZWYliofBWyhITn5/K6AYO9j3auCup7w00YzAKAyLKKqf
Z8aK+8cHrNczv4VN/DpY2PZDG3TxMfv3PXGyVoreZBHZ2ktVCSe/45KyLWV7fQ5A
trVnNeZrwPqZDyDY76Xp7IfjzyaawRX8/voF2/bkOAg9YiXBET1dG7/tGosRAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQkGIkIrRSg4lK3
UtxrduMACH85TTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84OEhMTFhYRHJhZEN3b2k2UjR1U1llbm9LRXYxclhCeG1K
dThIUW5Hblo3Qy8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vODhITExYWERyYWRDd29pNlI0dVNZZW5vS0V2MXJYQnht
SnU4SFFuR25aN0MvMS8yNDE4ODkwOEFEMTRBMEUyNTJCNzUyREM2Qjc2RTMwMDA4
N0YzOTRELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALJtmAwDQQCAAIwBwMF
ACgEQowwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBTzMA0GCSqGSIb3DQEBCwUA
A4IBAQAazRNrcH1fyHuLfyntLRDZBWmgLpTGeWXzTsUW1YFPvngK7hsu2Aqst5bR
gZdgjRo2iB5VSlyoi/f4Az4eozitr3P5fPDzCjgb8yaFqK2yD0R3Ohi/6LGSfTw4
VJZf3BkG5hL2EZ0ISBGtWk/Emb1Fk28oOQzCPEgVORgFS/x2DrzbvNIYk05PObu9
jPUH75Fi/eRcmtMeKl2Qs0wkWrlyKwyh/ORJ75qqRMj+jufgzLw35peWhTww1y/L
j846KtXByZ/QopHg3vzLOdhCby1tUXoYUqkobt5HMW8mbz5H0Kqg6Rno4obDAsyS
qxHSwWaJ2dq3NewpKsED5nYnosnq
-----END CERTIFICATE-----
Generated at Sat Apr 19 10:15:52 2025 by rpki-client